...

...

Evan Simpson wrote

This *can* be made secure (I think) by routing all management through an SSL- enabled server and shutting off Zope2's other port access methods, but it's not secure by *default*, which is a concern.

Or by using ssh to port forward through to the zope host, and doing all management connections through it... (and as an added advantage, because http-over-ssh doesn't have 'https' in the URL, the browsers will actually cache images. Hurrah!) Anthony -- Anthony Baxter <anthony@interlink.com.au> It's never too late to have a happy childhood.